Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/RWVvS-QxUdBqrmb_Yb9rmAeYzug.roa
File: RWVvS-QxUdBqrmb_Yb9rmAeYzug.roa (raw, json)
Hash identifier: RNWgGXcNTnci3HmNGcD/VzFsnU4BX0yB3/ILy4qfdTk=
Subject key identifier: 45:65:6F:4B:E4:31:51:D0:6A:AE:66:FF:61:BF:6B:98:07:98:CE:E8
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018B89FAEDEDDD15853A9FBB953A1CAF90B8
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/RWVvS-QxUdBqrmb_Yb9rmAeYzug.roa
Signing time: Wed 01 Nov 2023 08:23:25 +0000
ROA not before: Wed 01 Nov 2023 08:23:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 2a06:d642::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:fa:ed:ed:dd:15:85:3a:9f:bb:95:3a:1c:af:90:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Nov 1 08:23:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45656f4be43151d06aae66ff61bf6b980798cee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:50:32:b2:8b:f5:f8:de:bd:fc:d9:fe:a6:
fe:8e:a0:ba:e7:d1:0c:0b:55:e0:ca:ca:af:dc:dd:
51:82:b4:73:fa:be:38:d4:0e:ba:ea:54:26:45:91:
4e:08:eb:59:2f:a0:d8:bd:b2:20:9c:2b:c1:df:9c:
38:5f:0b:cc:66:91:31:bf:8d:d8:c9:55:9f:d9:e6:
aa:97:76:f8:91:ee:b6:9a:7a:dd:24:3e:49:01:91:
51:c5:41:ee:96:44:c0:86:5b:f7:8e:11:52:a9:a5:
c6:87:a5:b8:57:59:a1:7d:e5:6a:b8:a5:62:ff:34:
ad:42:86:28:35:e6:4a:52:ca:31:38:b4:91:a8:89:
de:1f:6f:ac:c3:b8:8d:57:7a:e7:79:38:a5:b1:c5:
29:28:c7:49:03:17:27:ca:e5:44:88:d7:ba:f0:cf:
75:35:2c:8a:6a:1b:36:ba:f0:65:3c:ec:07:ca:ca:
1d:5a:64:9a:86:7c:9f:cc:77:6a:35:f8:a3:4d:38:
b5:5f:1f:1c:0b:93:4a:d8:68:8a:58:e4:4d:f8:5a:
41:51:e9:37:e6:f1:ef:d5:f6:ab:95:0f:c9:ea:50:
db:41:be:30:db:89:4d:38:16:9f:f3:f2:9f:0f:e4:
74:9a:bd:e9:04:76:b0:2e:a1:54:b7:8d:9d:98:45:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:65:6F:4B:E4:31:51:D0:6A:AE:66:FF:61:BF:6B:98:07:98:CE:E8
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/RWVvS-QxUdBqrmb_Yb9rmAeYzug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d642::/32
Signature Algorithm: sha256WithRSAEncryption
b0:67:6a:d7:55:9c:9c:9e:da:35:62:1d:3d:12:91:a4:89:3a:
c7:24:0a:5d:83:c3:15:83:45:58:78:59:5b:77:aa:97:eb:49:
d3:f2:71:32:f5:2c:34:9b:1b:39:40:37:cf:84:3e:ee:70:cd:
34:79:ed:87:20:33:f1:bb:88:4b:ab:e9:0d:4b:d6:36:f2:c2:
bd:ed:6c:69:1e:a0:45:58:1f:16:84:b3:28:ad:37:97:0a:07:
99:2c:77:69:c2:27:b9:66:a9:5d:5a:4f:f8:16:3a:f0:9d:91:
fd:e1:1d:39:fa:be:3d:1c:48:a6:37:25:da:f1:fd:b0:10:5c:
06:ef:44:92:57:22:dd:53:3f:5f:4f:bb:8c:b3:b0:ef:a6:13:
78:ba:9c:88:66:ae:91:8c:ae:87:20:08:1e:b9:aa:86:1f:32:
fd:e9:e1:05:f7:df:dd:f7:a1:ab:5e:a6:75:e9:71:d7:db:08:
6e:a0:c6:45:f5:2e:ae:86:21:37:14:d3:fb:08:77:4b:e7:e2:
9e:31:a5:e6:b4:eb:02:33:43:90:06:9c:8c:2b:bf:59:13:1b:
9b:92:f5:b5:41:2a:30:28:c7:85:8f:bb:2d:40:8c:ff:7d:50:
f3:e7:82:b2:01:07:9c:d0:51:04:d6:47:1c:14:9b:cc:d2:13:
83:c8:54:e4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYuJ+u3t3RWFOp+7lTocr5C4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjMxMTAxMDgyMzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTY1NmY0YmU0MzE1MWQwNmFhZTY2ZmY2MWJmNmI5ODA3OThjZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNRQMrKL9fjevfzZ/qb+jqC659EM
C1Xgysqv3N1RgrRz+r441A666lQmRZFOCOtZL6DYvbIgnCvB35w4XwvMZpExv43Y
yVWf2eaql3b4ke62mnrdJD5JAZFRxUHulkTAhlv3jhFSqaXGh6W4V1mhfeVquKVi
/zStQoYoNeZKUsoxOLSRqIneH2+sw7iNV3rneTilscUpKMdJAxcnyuVEiNe68M91
NSyKahs2uvBlPOwHysodWmSahnyfzHdqNfijTTi1Xx8cC5NK2GiKWORN+FpBUek3
5vHv1farlQ/J6lDbQb4w24lNOBaf8/KfD+R0mr3pBHawLqFUt42dmEXmOQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEVlb0vkMVHQaq5m/2G/a5gHmM7oMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvUldWdlMtUXhVZEJxcm1iX1liOXJtQWVZenVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgbWQjAN
BgkqhkiG9w0BAQsFAAOCAQEAsGdq11WcnJ7aNWIdPRKRpIk6xyQKXYPDFYNFWHhZ
W3eql+tJ0/JxMvUsNJsbOUA3z4Q+7nDNNHnthyAz8buIS6vpDUvWNvLCve1saR6g
RVgfFoSzKK03lwoHmSx3acInuWapXVpP+BY68J2R/eEdOfq+PRxIpjcl2vH9sBBc
Bu9Eklci3VM/X0+7jLOw76YTeLqciGaukYyuhyAIHrmqhh8y/enhBfff3fehq16m
delx19sIbqDGRfUuroYhNxTT+wh3S+finjGl5rTrAjNDkAacjCu/WRMbm5L1tUEq
MCjHhY+7LUCM/31Q8+eCsgEHnNBRBNZHHBSbzNITg8hU5A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org